IN THE CLAIMS: 

This listing of claims will replace all prior versions, and listings, of claims in the 
present application: 

1. (Currently amended) A method of operating a storage server, the method 
comprising: 

receiving at the storage server, from a client, a first request to perform a storage- 
related operation relating to a set of data; 

responding to the first request at the storage server bv using metadata in the 
storage server to determine whether the set of data is stored externally to. and remotely 
from, the storage server: 

generating a second request in the storage server if tho firot roquoot oatiofioo a 
d e fin e d crit e rion in response to determining that the set of data is stored externally to. 
and remotely from, the storage server : 

sending the second request and information relating to the set of data 
from the storage server to a policy engine , wherein the policy engine responds to the 
second request bv retrieving the set of data from storage on behalf of the storage server 
and provides the set of data to the storage server in conjunction with a first response : 

receiving the first response and the set of data at the storage server, from the 
policy engine, a -the f irst response indicating a result of the policy engine having 
implemented a d e fined policy based on the information relating to the set of data; and 

sending a second response in accordance with the first response from the 
storage server to the client. 
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2. (Original) A method as recited in claim 1 , wherein the policy engine is external 
to the storage server. 

3. (Original) A method as recited in claim 1 , wherein the storage server and at 
least a portion of the policy engine are implemented in a single physical platform. 

4. (Original) A method as recited in claim 1 , wherein the first request is a request 
for a file managed by the storage server. 

5-6. (Canceled) 

7. (Original) A method as recited in claim 4, wherein the file type of the file is 
indicated in the information relating to the set of data. 

8. (Canceled) 

9. (Original) A method as recited in claim 1 , wherein the policy engine determines 
whether to approve or deny the second request based on an identity of the client. 

10. (Original) A method as recited in claim 1, wherein the policy engine determines 
whether to approve or deny the second request based on an identity of a user of the 
client. 

1 1 . (Original) A method as recited in claim 1 , wherein the policy engine determines 
whether to approve or deny the second request based on an identity of the storage 
server. 
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12. (Original) A method as recited in claim 11, wherein the information relating to 
the set of data comprises information specifically identifying the storage server from 
among a plurality of storage servers that are coupled to the policy engine. 

13. (Original) A method as recited in claim 1, wherein the policy engine determines 
whether to approve or deny the second request based on a quota. 

14. (Original) A method as recited in claim 1 , wherein the policy engine determines 
whether to approve or deny the second request based on a number of times the set of 
data has been accessed during a period of time. 

15. (Original) A method as recited in claim 1, wherein the storage server defers 
sending the client any response to the first request until the storage server receives the 
first response from the policy engine. 

16. (Canceled) 

17. (Original) A method as recited in claim 1 , further comprising: 

using one of a plurality of storage protocols implemented by the storage server to 
access the set of data, the plurality of storage protocols including a block-level storage 
protocol and a file-level storage protocol. 

18. (Currently amended) A method of operating a policy engine, the method 
comprising: 

receiving at the policy engine, from a storage server, a first request and 
information relating to a set of data, the first request being in response to a storage- 
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related client request received by the storage server from a client and relating to the set 
of data; 

applying a dof i nod policy in the policy engine using the information relating to a 
set of data; and 

responding to the first request at the policy engine by retrieving the set of data 
from storage on behalf of the storage server: and 

oonding a first response from th e pol i cy ongino to tho storage s e rver to indicate 
providing the set of data from the policy engine to the storage server in conjunction with 
a first response, the first response indicating a result of applying the d e fin e d policy, the 
first response to cause the storage server to send a second response to the client in 
accordance with the first response. 

19. (Original) A method as recited in claim 18, wherein the policy engine is external 
to the storage server. 

20. (Original) A method as recited in claim 18, wherein the storage server and at 
least a portion of the policy engine are implemented in a single physical platform. 

21. (Original) A method as recited in claim 18, wherein the client request is a 
request for a file managed by the storage server. 

22-23. (Canceled) 

24. (Currently amended) A method as recited in claim 2418, wherein the file type of 
the file is indicated in the information relating to the set of data. 
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25. (Original) A method as recited in claim 18, further comprising using the policy 
engine to define a criterion in the storage server, for use by the storage server to 
determine when a subsequent client request is to be referred to the policy engine for 
resolution. 

26. (Currently amended) A method as recited in claim 18, wherein applying the 
dofinod policy comprises approving or denying the second request based on an identity 
of the client. 

27. (Currently amended) A method as recited in claim 18, wherein applying the 
dofinod policy comprises approving or denying the second request based on an identity 
of a user of the client. 

28. (Currently amended) A method as recited in claim 18, wherein applying the 
defmed-policy comprises approving or denying the second request based on an identity 
of the storage server. 

29. (Currently amended) A method as recited in claim 18, wherein applying the 
d e fin e d policy comprises approving or denying the second request based on a user- 
based quota. 

30. (Currently amended) A method as recited in claim 18, wherein applying the 
d e fin e d policy comprises approving or denying the second request based on a quota 
applicable to the set of data. 
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31. (Currently amended) A method as recited in claim 18, wherein applying the 
dofined policy comprises approving or denying the second request based on a quota 
applicable to the storage server. 

32. (Currently amended) A method as recited in claim 18, wherein applying the 
defin e d policy comprises approving or denying the second request based on a number 
of times the set of data has been accessed during a period of time. 

33. (Canceled) 

34. (Currently amended) A storage system comprising: 

a storage server to provide a client with access via a network to data in a mass 
storage facility, the storage server configured to receive from the client a first request to 
perform a storage-related operation relating to a set of data managed or to be managed 
by the storage server, and to generate a second request if the first request satisfies a 
defined criterion; and 

a remote policy engine coupled to the storage server to receive the second 
request and information relating to the set of data from the storage server, the remote 
policy engine configured to approve or deny the second request by implementing a 
defined-policy using the information relating to the set of data, to send a first response 
to the storage server based on a result of implementing the d e fin e d policy, the storage 
server further configured to send a second response to the client in accordance with the 
first response; 
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wherein the storage server responds to the first request bv using metadata in the 
storage server to determine that the set of data is stored e xternally to. and remotely 
from, the storage server, and the remote policy engine responds to the second request 
bv retrieving the set of data from remote storage on behalf of the storage server and 
provides the set of data to the storage server in conjunction with the first response. 

35. (Original) A storage system as recited in claim 30, wherein the first request is a 
request for a file managed by the storage server. 

36-37. (Canceled) 

38. (Original) A storage system as recited in claim 33, wherein the file type of the file 
is indicated in the information relating to the set of data. 

39. (Original) A storage system as recited in claim 34, wherein the remote policy 
engine determines whether to approve or deny the second request based on the client. 

40. (Original) A storage system as recited in claim 34, wherein the remote policy 
engine determines whether to approve or deny the second request based on a user- 
based quota. 

41. (Original) A storage system as recited in claim 34, wherein the remote policy 
engine determines whether to approve or deny the second request based on a quota 
applicable to the set of data. 
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42. (Original) A storage system as recited in claim 34, wherein the information 
relating to the set of data comprises information specifically identifying the storage 
server from among a plurality of storage servers that are coupled to the remote policy 
engine. 

43. (Original) A storage system as recited in claim 34, wherein the remote policy 
engine determines whether to approve or deny the second request based on a number 
of times the set of data has been accessed during a period of time. 

44. (Original) A storage system as recited in claim 34, wherein the storage server 
does not send the client any response to the first request until the storage server 
receives the first response from the remote policy engine. 

45. (Canceled) 

46. (Original) A storage system as recited in claim 34, wherein the storage server is 
operable to implement each of a plurality of storage protocols to access data, the 
plurality of storage protocols including a block-level storage protocol and a file-level 
storage protocol. 

47. (Currently amended) A storage system comprising: 

a plurality of storage servers, each to provide a set of clients with access to 
corresponding stored data; and 

a policy engine to receive requests from each of the storage servers, each 
request being based on a previous storage-related request received by one of the 
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storage servers from a client, the policy engine configured to respond to each request 
by implementing one or more of a set of defin e d storage-related policies and to send a 
response to a requesting storage server based on a result of implementing the d e fin e d 
policy, wherein one or more of the policies are specific to a particular storage server, 
and wherein the storage servers respond to the storage-related requests from clients in 
a manner synchronous with the responses from the policy engine. 

48. (Currently amended) A method of operating a storage server, the method 
comprising: 

receiving at the storage server, from a client, a request to perform a storage- 
related operation relating to a set of data; 

if the first request satisfies a defined criterion, then operating the storage server 
to invoke a policy engine configured to determine a disposition of the reques t, the policy 
engine being external to the storage server, wherein the policy engine operates to 
restrict access to the set of data, including restricting ability to open, close and modify 
the set of data : 

receiving at the storage server a response from the policy engine indicating a 
disposition of the reques t, the policy e ngine b ei ng ext e rnal to th e storag e s e rv e r ; and 

responding to the request in accordance with the response from the policy 
engine. 

49. (Canceled) 
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